Principal Security Engineer - Attack Surface & IAM

OVO; West of England, Greater London, Glasgow; Hybrid; GBP 105,000 - 150,000; Full time

Benefits offered by this job

34 days holiday

Healthcare benefits

Private medical insurance

Pension

Flex Pay 9%

Belonging Networks

Job summary

As a Principal Security Engineer (Attack Surface Management) at OVO, you will lead the enterprise-wide strategy for zero trust access, attack surface observability and automation-driven security workflows. This is a hands-on senior technical leadership role requiring deep expertise in identity access management and vulnerability remediation, with a strong focus on automated, AI-enabled processes.

You will mentor senior engineers, collaborate with engineering, procurement, risk and security

Qualifications

• Expert-level security engineering experience.

Responsibilities

• Lead vulnerability management and remediation governance across the enterprise.
• Define IAM policies and govern identity and access management strategy.
• Champion secure supply chain management controls.
• Balance risk and business needs, guiding architectural decisions.
• Mentor senior engineers and elevate security practice at OVO.
• Drive Community of Practice and knowledge sharing.

Skills

Data-driven

Communication

Automator

Job description

As a Principal Security Engineer (Attack Surface Management) at OVO, you will lead the enterprise-wide strategy for zero trust access, attack surface observability and automation-driven security workflows. This is a hands-on senior technical leadership role requiring deep expertise in identity access management and vulnerability remediation, with a strong focus on automated, AI-enabled processes.

You will mentor senior engineers, collaborate with engineering, procurement, risk and security